7c2b7c5911702274c3808b3bc5f1aad29f010bf511694489468aa2e6ffb295a7 | Triage

Sharing

General

Target

685845d66f894c67f3efdb94003ec350_NeikiAnalytics.exe
Size

72KB
Sample

240523-bdyygsff9w
MD5

685845d66f894c67f3efdb94003ec350
SHA1

8175d7b7cd19148390dac2a429e65c45f8c71330
SHA256

7c2b7c5911702274c3808b3bc5f1aad29f010bf511694489468aa2e6ffb295a7
SHA512

72caa55b0018a45db60e524c697312631898beee49b059309f65fbb0285eb2c3e398da10210e7096af0473a1b492d5553bcdd7b646036a4f4fe1a74fb6a769c0
SSDEEP

768:x/nk8AFM3YO3mqZLB0eA4Vb+O1q+AfQt295Pe0+03PHvioazoT2bxQ5Tu:xc8acY5c0Hqb+it2zeyPioag2bxQg

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  685845d66f894c67f3efdb94003ec350_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  685845d66f894c67f3efdb94003ec350
- SHA1
  
  8175d7b7cd19148390dac2a429e65c45f8c71330
- SHA256
  
  7c2b7c5911702274c3808b3bc5f1aad29f010bf511694489468aa2e6ffb295a7
- SHA512
  
  72caa55b0018a45db60e524c697312631898beee49b059309f65fbb0285eb2c3e398da10210e7096af0473a1b492d5553bcdd7b646036a4f4fe1a74fb6a769c0
- SSDEEP
  
  768:x/nk8AFM3YO3mqZLB0eA4Vb+O1q+AfQt295Pe0+03PHvioazoT2bxQ5Tu:xc8acY5c0Hqb+it2zeyPioag2bxQg
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan